Improve vulnerability management processes so that all vulnerabilities are identified and mitigated; for vulnerabilities that cannot be mitigated by VA deadlines, create plans of action and milestones.
Improve the baseline configuration process to make sure network devices and databases are running authorized software that is configured to approved baselines and free of vulnerabilities.
Confirm appropriate network isolation and protections for all medical devices and special‑purpose systems hosted on the Lovell Federal Healthcare System networks.
Separate the duties of maintaining physical blank key stock and making keys to improve physical access controls over key inventories.
Improve the process for monitoring and servicing uninterruptible power supplies that support the network infrastructure.
Complete the installation of grounding measures for all communications closets.
Establish a process to make sure a witness observes the destruction of temporary paper files that contain personally identifiable information and protected health information.